Robustness Implies Privacy in Statistical Estimation
Not on the map. Why?
Abstract (arXiv)
We study the relationship between adversarial robustness and differential privacy in high-dimensional algorithmic statistics. We give the first black-box reduction from privacy to robustness which can produce private estimators with optimal tradeoffs among sample complexity, accuracy, and privacy for a wide range of fundamental high-dimensional parameter estimation problems, including mean and covariance estimation. We show that this reduction can be implemented in polynomial time in some important special cases. In particular, using nearly-optimal polynomial-time robust estimators for the mean and covariance of high-dimensional Gaussians which are based on the Sum-of-Squares method, we design the first polynomial-time private estimators for these problems with nearly-optimal samples-accuracy-privacy tradeoffs. Our algorithms are also robust to a nearly optimal fraction of adversarially-corrupted samples.
Key facts. Cited by 47 papers in the map (data through 7 Oct 2026). Builds on 32 of its 50 references that are in the map. First posted on arXiv 9 Dec 2022.
Builds on
32 of 50 references.
References · 32
- 2016Statistical Query Lower Bounds for Robust Estimation of High-dimensional Gaussians and Gaussian Mixturescited by 114
- 2017Finite Sample Differentially Private Confidence Intervalscited by 103
- 2018Privately Learning High-Dimensional Distributionscited by 103
- 2019Recent Advances in Algorithmic High-Dimensional Robust Statisticscited by 100
- 2017Being Robust (in High Dimensions) Can Be Practicalcited by 83
- 2017Mixture Models, Robustness, and Sum of Squares Proofscited by 81
- 2018Efficient Algorithms and Lower Bounds for Robust Linear Regressioncited by 76
- 2020Private Mean Estimation of Heavy-Tailed Distributionscited by 73
- 2018Efficient Algorithms for Outlier-Robust Regressioncited by 72
- 2021Robust and Differentially Private Mean Estimationcited by 66
- 2021Differential privacy and robust statistics in high dimensionscited by 64
- 2019Private Hypothesis Selectioncited by 60
20 more
- 2019Average-Case Averages: Private Algorithms for Smooth Sensitivity and Mean Estimationcited by 51
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2017Resilience: A Criterion for Learning in the Presence of Arbitrary Outlierscited by 43
- 2020On the Sample Complexity of Privately Learning Unbounded High-Dimensional Gaussianscited by 41
- 2021Private and polynomial time algorithms for learning Gaussians and beyondcited by 39
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
- 2021Tight and Robust Private Mean Estimation with Few Userscited by 26
- 2018High-dimensional estimation via sum-of-squares proofscited by 25
- 2022Privacy Induces Robustness: Information-Computation Gaps and Sparse Mean Estimationcited by 25
- 2019Privacy-preserving parametric inference: a case for robust statisticscited by 17
- 2019How Hard Is Robust Mean Estimation?cited by 16
- 2022On robustness and local differential privacycited by 15
- 2021Polynomial-Time Sum-of-Squares Can Robustly Estimate Mean and Covariance of Gaussians Optimallycited by 14
- 2020Robust and Private Learning of Halfspacescited by 7
- 2021Differentially private depth functions and their associated medianscited by 7
- 2021Perturbed M-Estimation: A Further Investigation of Robust Statistics for Differential Privacycited by 2
- 2022Differentially private multivariate medianscited by 2
Built on by
Citing papers per year: 2022: 1; 2023: 16; 2024: 17; 2025: 8; 2026: 5.
47 papers.
Sort:
By area:
- 2023From Robustness to Privacy and Backcited by 27
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023Fast, Sample-Efficient, Affine-Invariant Private Mean and Covariance Estimation for Subgaussian Distributionscited by 22
- 2023Polynomial Time and Private Learning of Unbounded Gaussian Mixture Modelscited by 19
- 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimationcited by 16
- 2023Private Distribution Learning with Public Data: The View from Sample Compressioncited by 14
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regressioncited by 14
- 2024Provable Differentially Private Computation of the Cross-Attention Mechanismcited by 14
- 2023The Bayesian Stability Zoocited by 13
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimationcited by 12
- 2023A Fast Algorithm for Adaptive Private Mean Estimationcited by 11
- 2023Near Optimal Private and Robust Linear Regressioncited by 9
35 more
- 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimescited by 9
- 2024Fast John Ellipsoid Computation with Differential Privacy Optimizationcited by 7
- 2023On Private and Robust Banditscited by 6
- 2024Dimension-free Private Mean Estimation for Anisotropic Distributionscited by 6
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributionscited by 5
- 2023Mixtures of Gaussians are Privately Learnable with a Polynomial Number of Samplescited by 5
- 2024Efficient Certificates of Anti-Concentration Beyond Gaussianscited by 4
- 2024Distribution Learnability and Robustnesscited by 4
- 2023Sample-Optimal Locally Private Hypothesis Selection and the Provable Benefits of Interactivitycited by 3
- 2024Not All Learnable Distribution Classes are Privately Learnablecited by 3
- 2024Private graphon estimation via sum-of-squarescited by 3
- 2024SoS Certificates for Sparse Singular Values and Their Applications: Robust Statistics, Subspace Distortion, and Morecited by 3
- 2025SquarechiPO: Differentially Private and Robust chi2-Preference Optimization in Offline Direct Alignmentcited by 3
- 2024Private Edge Density Estimation for Random Graphs: Optimal, Efficient and Robustcited by 2
- 2024Agnostic Private Density Estimation for GMMs via List Global Stabilitycited by 2
- 2024The Broader Landscape of Robustness in Algorithmic Statisticscited by 2
- 2025Tukey Depth Mechanisms for Practical Private Mean Estimationcited by 2
- 2025Causality Is Key to Understand and Balance Multiple Goals in Trustworthy ML and Foundation Modelscited by 2
- 2025Sample-Optimal Private Regression in Polynomial Timecited by 2
- 2023Differentially-Private Decision Trees and Provable Robustness to Data Poisoningcited by 1
- 2024Bridging Privacy and Robustness for Trustworthy Machine Learningcited by 1
- 2024Perturb-and-Project: Differentially Private Similarities and Marginalscited by 1
- 2025Optimal Differentially Private Sampling of Unbounded Gaussianscited by 1
- 2025Private Statistical Estimation via Truncationcited by 1
- 2026Computation-Utility-Privacy Tradeoffs in Bayesian Estimationcited by 1
- 2026Gap-Free Streaming PCA Beyond Rank-One Updates: Near-Optimal Rates and Applications to Differential Privacycited by 1
- 2022Privately Estimating a Gaussian: Efficient, Robust and Optimalcited by 0
- 2023Statistical Barriers to Affine-equivariant Estimationcited by 0
- 2024Sample-Efficient Private Learning of Mixtures of Gaussianscited by 0
- 2024Optimal Rates for Robust Stochastic Convex Optimizationcited by 0
- 2025Private Training & Data Generation by Clustering Embeddingscited by 0
- 2025Robust Estimation Under Heterogeneous Corruption Ratescited by 0
- 2026Robust Privacy: Inference-Stage Privacy through Certified Robustnesscited by 0
- 2026Computationally Efficient Replicable Learning of Parities and Applicationscited by 0
- 2026Robust Statistical Estimators with Bounded Empirical Sensitivitycited by 0
- 2026Gap-Free Streaming PCA Beyond Rank-One Updates: Near-Optimal Rates and Applications to Differential Privacy22 Sep 2026
- 2026Robust Statistical Estimators with Bounded Empirical Sensitivity21 May 2026
- 2026Computation-Utility-Privacy Tradeoffs in Bayesian Estimation18 Mar 2026
- 2026Computationally Efficient Replicable Learning of Parities and Applications10 Feb 2026
- 2026Robust Privacy: Inference-Stage Privacy through Certified Robustness24 Jan 2026
- 2025Robust Estimation Under Heterogeneous Corruption Rates20 Aug 2025
- 2025Private Training & Data Generation by Clustering Embeddings20 Jun 2025
- 2025SquarechiPO: Differentially Private and Robust chi2-Preference Optimization in Offline Direct Alignment27 May 2025
- 2025Private Statistical Estimation via Truncation18 May 2025
- 2025Sample-Optimal Private Regression in Polynomial Time31 Mar 2025
- 2025Optimal Differentially Private Sampling of Unbounded Gaussians3 Mar 2025
- 2025Causality Is Key to Understand and Balance Multiple Goals in Trustworthy ML and Foundation Models28 Feb 2025
35 more
- 2025Tukey Depth Mechanisms for Practical Private Mean Estimation25 Feb 2025
- 2024SoS Certificates for Sparse Singular Values and Their Applications: Robust Statistics, Subspace Distortion, and More30 Dec 2024
- 2024Optimal Rates for Robust Stochastic Convex Optimization15 Dec 2024
- 2024The Broader Landscape of Robustness in Algorithmic Statistics3 Dec 2024
- 2024Sample-Efficient Private Learning of Mixtures of Gaussians4 Nov 2024
- 2024Dimension-free Private Mean Estimation for Anisotropic Distributions1 Nov 2024
- 2024Fast John Ellipsoid Computation with Differential Privacy Optimization12 Aug 2024
- 2024Provable Differentially Private Computation of the Cross-Attention Mechanism20 Jul 2024
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regression18 Jul 2024
- 2024Agnostic Private Density Estimation for GMMs via List Global Stability5 Jul 2024
- 2024Distribution Learnability and Robustness25 Jun 2024
- 2024Perturb-and-Project: Differentially Private Similarities and Marginals7 Jun 2024
- 2024Private Edge Density Estimation for Random Graphs: Optimal, Efficient and Robust26 May 2024
- 2024Efficient Certificates of Anti-Concentration Beyond Gaussians23 May 2024
- 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimes26 Apr 2024
- 2024Bridging Privacy and Robustness for Trustworthy Machine Learning25 Mar 2024
- 2024Private graphon estimation via sum-of-squares18 Mar 2024
- 2024Not All Learnable Distribution Classes are Privately Learnable1 Feb 2024
- 2023Sample-Optimal Locally Private Hypothesis Selection and the Provable Benefits of Interactivity9 Dec 2023
- 2023The Bayesian Stability Zoo27 Oct 2023
- 2023Statistical Barriers to Affine-equivariant Estimation16 Oct 2023
- 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimation10 Oct 2023
- 2023Mixtures of Gaussians are Privately Learnable with a Polynomial Number of Samples7 Sep 2023
- 2023Private Distribution Learning with Public Data: The View from Sample Compression11 Aug 2023
- 2023Differentially-Private Decision Trees and Provable Robustness to Data Poisoning24 May 2023
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributions13 Apr 2023
- 2023Polynomial Time and Private Learning of Unbounded Gaussian Mixture Models7 Mar 2023
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learning9 Feb 2023
- 2023On Private and Robust Bandits6 Feb 2023
- 2023From Robustness to Privacy and Back3 Feb 2023
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimation30 Jan 2023
- 2023Near Optimal Private and Robust Linear Regression30 Jan 2023
- 2023Fast, Sample-Efficient, Affine-Invariant Private Mean and Covariance Estimation for Subgaussian Distributions28 Jan 2023
- 2023A Fast Algorithm for Adaptive Private Mean Estimation17 Jan 2023
- 2022Privately Estimating a Gaussian: Efficient, Robust and Optimal15 Dec 2022
- 2023From Robustness to Privacy and Backcited by 27
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023Fast, Sample-Efficient, Affine-Invariant Private Mean and Covariance Estimation for Subgaussian Distributionscited by 22
- 2023Polynomial Time and Private Learning of Unbounded Gaussian Mixture Modelscited by 19
- 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimationcited by 16
- 2023Private Distribution Learning with Public Data: The View from Sample Compressioncited by 14
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regressioncited by 14
- 2023The Bayesian Stability Zoocited by 13
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimationcited by 12
- 2023A Fast Algorithm for Adaptive Private Mean Estimationcited by 11
- 2023Near Optimal Private and Robust Linear Regressioncited by 9
- 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimescited by 9
12 most cited of 44 All 44 (JSON)
- 2026Gap-Free Streaming PCA Beyond Rank-One Updates: Near-Optimal Rates and Applications to Differential Privacy22 Sep 2026
- 2026Robust Statistical Estimators with Bounded Empirical Sensitivity21 May 2026
- 2026Computation-Utility-Privacy Tradeoffs in Bayesian Estimation18 Mar 2026
- 2026Computationally Efficient Replicable Learning of Parities and Applications10 Feb 2026
- 2026Robust Privacy: Inference-Stage Privacy through Certified Robustness24 Jan 2026
- 2025Robust Estimation Under Heterogeneous Corruption Rates20 Aug 2025
- 2025Private Training & Data Generation by Clustering Embeddings20 Jun 2025
- 2025Private Statistical Estimation via Truncation18 May 2025
- 2025Sample-Optimal Private Regression in Polynomial Time31 Mar 2025
- 2025Optimal Differentially Private Sampling of Unbounded Gaussians3 Mar 2025
- 2025Causality Is Key to Understand and Balance Multiple Goals in Trustworthy ML and Foundation Models28 Feb 2025
- 2025Tukey Depth Mechanisms for Practical Private Mean Estimation25 Feb 2025
12 newest of 44 All 44 (JSON)